References https://www.ufida168.com/case_detail/4106.html https://cn-sec.com/archives/3394914.html https://cn-sec.com/archives/3418751.html https://blog.csdn.net/IDHALASHAO/article/details/143888750 https://www.ufida168.com/support/1595245675881263104-40-10.html https://cn-sec.com/archives/tag/yonbip
Related Vulnerabilities关于NC Cloud及YonBIP高级版系统的公共入口接口漏洞安全通告YonBIP产品的cas未授权访问漏洞关于YonBIP产品的cas未授权访问漏洞安全通告关于YonBIP高级版系统的SQL注入漏洞的安全通告关于NC Cloud及YonBIP高级版系统的datacollectservlet接口漏洞安全通告PoCCVE-2025-66744: Yonyou YonBIP - Path Traversal关于NC、NC Cloud及YonBIP高级版系统的ActionInvokeService任意文件上传漏洞的安全通告关于NC Cloud及YonBIP高级版系统ActionExecutor的任意代码执行漏洞的安全通告PoCyonyou-yonbip-yonbiplogin-fileread: 用友YonBIP_yonbiplogin存在任意文件读取漏洞PoCyonyou-yonbip-lfi: YonBIP - Arbitrary File ReadYonBIP旗舰版用户认证逻辑绕过漏洞YonBIP旗舰版用户认证逻辑绕过问题的风险通告关于NC Cloud、YonBIP高级版接收或拒绝offer接口存在SQL注入漏洞修复通告